In Modem, there is a possible out of bounds write due to a missing bounds check. This could lead to remote escalation of privilege, if a UE has connected to a rogue base station controlled by the attacker, with no additional execution privileges needed. User interaction is needed for exploitation.
Patch ID: MOLY01088681; Issue ID: MSV-4460.
Attack Parameters
Attack Vector
Adjacent
Requires local network access
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
None
No user interaction needed
Impact Assessment
Confidentiality
High
Complete data leak
Integrity
High
Complete data modification
Availability
High
Complete denial of service
CVSS Vector v3.1
Weakness Type (CWE)
Vulnerable Products 124
| Configuration | From (including) | Up to (excluding) |
|---|---|---|
|
Mediatek Mt2735_Firmware
cpe:2.3:o:mediatek:mt2735_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt2735
cpe:2.3:h:mediatek:mt2735:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt2737_Firmware
cpe:2.3:o:mediatek:mt2737_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt2737
cpe:2.3:h:mediatek:mt2737:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6813_Firmware
cpe:2.3:o:mediatek:mt6813_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6813
cpe:2.3:h:mediatek:mt6813:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6833_Firmware
cpe:2.3:o:mediatek:mt6833_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6833
cpe:2.3:h:mediatek:mt6833:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6833p_Firmware
cpe:2.3:o:mediatek:mt6833p_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6833p
cpe:2.3:h:mediatek:mt6833p:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6835_Firmware
cpe:2.3:o:mediatek:mt6835_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6835
cpe:2.3:h:mediatek:mt6835:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6835t_Firmware
cpe:2.3:o:mediatek:mt6835t_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6835t
cpe:2.3:h:mediatek:mt6835t:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6853_Firmware
cpe:2.3:o:mediatek:mt6853_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6853
cpe:2.3:h:mediatek:mt6853:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6853t_Firmware
cpe:2.3:o:mediatek:mt6853t_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6853t
cpe:2.3:h:mediatek:mt6853t:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6855_Firmware
cpe:2.3:o:mediatek:mt6855_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6855
cpe:2.3:h:mediatek:mt6855:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6855t_Firmware
cpe:2.3:o:mediatek:mt6855t_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6855t
cpe:2.3:h:mediatek:mt6855t:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6873_Firmware
cpe:2.3:o:mediatek:mt6873_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6873
cpe:2.3:h:mediatek:mt6873:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6875_Firmware
cpe:2.3:o:mediatek:mt6875_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6875
cpe:2.3:h:mediatek:mt6875:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6875t_Firmware
cpe:2.3:o:mediatek:mt6875t_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6875t
cpe:2.3:h:mediatek:mt6875t:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6877_Firmware
cpe:2.3:o:mediatek:mt6877_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6877
cpe:2.3:h:mediatek:mt6877:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6877t_Firmware
cpe:2.3:o:mediatek:mt6877t_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6877t
cpe:2.3:h:mediatek:mt6877t:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6877tt_Firmware
cpe:2.3:o:mediatek:mt6877tt_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6877tt
cpe:2.3:h:mediatek:mt6877tt:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6878_Firmware
cpe:2.3:o:mediatek:mt6878_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6878
cpe:2.3:h:mediatek:mt6878:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6878m_Firmware
cpe:2.3:o:mediatek:mt6878m_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6878m
cpe:2.3:h:mediatek:mt6878m:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6879_Firmware
cpe:2.3:o:mediatek:mt6879_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6879
cpe:2.3:h:mediatek:mt6879:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6880_Firmware
cpe:2.3:o:mediatek:mt6880_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6880
cpe:2.3:h:mediatek:mt6880:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6883_Firmware
cpe:2.3:o:mediatek:mt6883_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6883
cpe:2.3:h:mediatek:mt6883:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6885_Firmware
cpe:2.3:o:mediatek:mt6885_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6885
cpe:2.3:h:mediatek:mt6885:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6886_Firmware
cpe:2.3:o:mediatek:mt6886_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6886
cpe:2.3:h:mediatek:mt6886:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6889_Firmware
cpe:2.3:o:mediatek:mt6889_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6889
cpe:2.3:h:mediatek:mt6889:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6890_Firmware
cpe:2.3:o:mediatek:mt6890_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6890
cpe:2.3:h:mediatek:mt6890:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6891_Firmware
cpe:2.3:o:mediatek:mt6891_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6891
cpe:2.3:h:mediatek:mt6891:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6893_Firmware
cpe:2.3:o:mediatek:mt6893_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6893
cpe:2.3:h:mediatek:mt6893:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6895_Firmware
cpe:2.3:o:mediatek:mt6895_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6895
cpe:2.3:h:mediatek:mt6895:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6895tt_Firmware
cpe:2.3:o:mediatek:mt6895tt_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6895tt
cpe:2.3:h:mediatek:mt6895tt:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6896_Firmware
cpe:2.3:o:mediatek:mt6896_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6896
cpe:2.3:h:mediatek:mt6896:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6897_Firmware
cpe:2.3:o:mediatek:mt6897_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6897
cpe:2.3:h:mediatek:mt6897:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6899_Firmware
cpe:2.3:o:mediatek:mt6899_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6899
cpe:2.3:h:mediatek:mt6899:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6980_Firmware
cpe:2.3:o:mediatek:mt6980_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6980
cpe:2.3:h:mediatek:mt6980:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6980d_Firmware
cpe:2.3:o:mediatek:mt6980d_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6980d
cpe:2.3:h:mediatek:mt6980d:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6983_Firmware
cpe:2.3:o:mediatek:mt6983_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6983
cpe:2.3:h:mediatek:mt6983:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6983t_Firmware
cpe:2.3:o:mediatek:mt6983t_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6983t
cpe:2.3:h:mediatek:mt6983t:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6985_Firmware
cpe:2.3:o:mediatek:mt6985_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6985
cpe:2.3:h:mediatek:mt6985:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6985t_Firmware
cpe:2.3:o:mediatek:mt6985t_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6985t
cpe:2.3:h:mediatek:mt6985t:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6989_Firmware
cpe:2.3:o:mediatek:mt6989_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6989
cpe:2.3:h:mediatek:mt6989:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6989t_Firmware
cpe:2.3:o:mediatek:mt6989t_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6989t
cpe:2.3:h:mediatek:mt6989t:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6990_Firmware
cpe:2.3:o:mediatek:mt6990_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6990
cpe:2.3:h:mediatek:mt6990:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6991_Firmware
cpe:2.3:o:mediatek:mt6991_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt6991
cpe:2.3:h:mediatek:mt6991:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8668_Firmware
cpe:2.3:o:mediatek:mt8668_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8668
cpe:2.3:h:mediatek:mt8668:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8673_Firmware
cpe:2.3:o:mediatek:mt8673_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8673
cpe:2.3:h:mediatek:mt8673:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8675_Firmware
cpe:2.3:o:mediatek:mt8675_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8675
cpe:2.3:h:mediatek:mt8675:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8676_Firmware
cpe:2.3:o:mediatek:mt8676_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8676
cpe:2.3:h:mediatek:mt8676:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8678_Firmware
cpe:2.3:o:mediatek:mt8678_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8678
cpe:2.3:h:mediatek:mt8678:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8755_Firmware
cpe:2.3:o:mediatek:mt8755_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8755
cpe:2.3:h:mediatek:mt8755:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8771_Firmware
cpe:2.3:o:mediatek:mt8771_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8771
cpe:2.3:h:mediatek:mt8771:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8775_Firmware
cpe:2.3:o:mediatek:mt8775_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8775
cpe:2.3:h:mediatek:mt8775:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8791_Firmware
cpe:2.3:o:mediatek:mt8791_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8791
cpe:2.3:h:mediatek:mt8791:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8791t_Firmware
cpe:2.3:o:mediatek:mt8791t_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8791t
cpe:2.3:h:mediatek:mt8791t:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8792_Firmware
cpe:2.3:o:mediatek:mt8792_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8792
cpe:2.3:h:mediatek:mt8792:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8793_Firmware
cpe:2.3:o:mediatek:mt8793_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8793
cpe:2.3:h:mediatek:mt8793:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8795t_Firmware
cpe:2.3:o:mediatek:mt8795t_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8795t
cpe:2.3:h:mediatek:mt8795t:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8797_Firmware
cpe:2.3:o:mediatek:mt8797_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8797
cpe:2.3:h:mediatek:mt8797:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8798_Firmware
cpe:2.3:o:mediatek:mt8798_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8798
cpe:2.3:h:mediatek:mt8798:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8863_Firmware
cpe:2.3:o:mediatek:mt8863_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8863
cpe:2.3:h:mediatek:mt8863:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8873_Firmware
cpe:2.3:o:mediatek:mt8873_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8873
cpe:2.3:h:mediatek:mt8873:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8883_Firmware
cpe:2.3:o:mediatek:mt8883_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8883
cpe:2.3:h:mediatek:mt8883:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8893_Firmware
cpe:2.3:o:mediatek:mt8893_firmware:-:*:*:*:*:*:*:*
|
— | — |
|
Mediatek Mt8893
cpe:2.3:h:mediatek:mt8893:-:*:*:*:*:*:*:*
|
— | — |